JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.184.175.144

172.184.175.144 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 59%: ?

59%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.184.175.144

Whois 172.184.175.144

IP Abuse Reports for 172.184.175.144:

This IP address has been reported a total of 38 times from 29 distinct sources. 172.184.175.144 was first reported on November 16th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-15 01:28:41 (2 weeks ago)	2026-06-15 01:28:41 warning[3236178]: host unknown[172.184.175.144]: unauthorized access a ... show more 2026-06-15 01:28:41 warning[3236178]: host unknown[172.184.175.144]: unauthorized access attempted: tcp/2083 show less	Port Scan Brute-Force
🇩🇪 ghostwarriors	2026-06-15 00:50:16 (2 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Scan	2026-06-15 00:42:24 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 tinect	2026-06-14 23:28:56 (2 weeks ago)	This IP was detected by CrowdSec triggering tinect/http-sensitive-file-probe	Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 23:21:03 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.184.175.144 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.184.175.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:21:00.566596 2026] [security2:error] [pid 23557:tid 23557] [client 172.184.175.144:21912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.78"] [uri "/.git/HEAD"] [unique_id "ai83XDheKstIUwh6DMTEEgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-14 22:55:47 (2 weeks ago)	172.184.175.144 - - [14/Jun/2026:15:55:47 -0700] "GET /.env HTTP/1.1" 403 397 "-" "Mozilla/5.0 (comp ... show more 172.184.175.144 - - [14/Jun/2026:15:55:47 -0700] "GET /.env HTTP/1.1" 403 397 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-14 22:48:13 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.184.175.144 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.184.175.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:48:09.390147 2026] [security2:error] [pid 19304:tid 19317] [client 172.184.175.144:21586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.124"] [uri "/.git/HEAD"] [unique_id "ai8vqQmhlCfpTyhf9fR-ngAAAUU"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 urnilxfgbez	2026-06-14 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2026-06-14 22:43:09 (2 weeks ago)	[Mon Jun 15 00:43:08.280575 2026] [:error] [pid 2744534:tid 2744534] [client 172.184.175.144:21918] ... show more [Mon Jun 15 00:43:08.280575 2026] [:error] [pid 2744534:tid 2744534] [client 172.184.175.144:21918] ModSecurity: Warning. Matched "Operator `PmFromFile' with parameter `restricted-files.data' against variable `REQUEST_FILENAME' (Value: `/.git/HEAD' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "131"] [id "930130"] [rev ""] [msg "Restricted File Access Attempt"] [data "Matched Data: .git/ found within REQUEST_FILENAME: /.git/HEAD"] [severity "2"] [ver "OWASP_CRS/4.28.0-dev"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [uri "/.git/HEAD"] [unique_id "17814769889.916113"] [ref "o1,5v4,10t:utf8toUnicode,t:urlDecodeUni,t:normalizePathWin"] [Mon Jun 15 00:43:08.994995 2026] [:error] [pid 2744539:tid 2744539] [client 172.184.175.144:21915] ModSecurity ... show less	Web App Attack
🇺🇸 xmission.com	2026-06-14 21:42:23 (2 weeks ago)	Blocked by UFW (TCP on 2078) Source port: 21573 TTL: 51 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2078) Source port: 21573 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 172.184.175.144) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-14 21:17:20 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.184.175.144 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.184.175.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:17:16.513877 2026] [security2:error] [pid 15609:tid 15609] [client 172.184.175.144:21642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.25"] [uri "/.git/HEAD"] [unique_id "ai8aXHdp8PaPp2drpoaiXQAAAC8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-14 06:55:41 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 RAP	2026-06-13 19:55:09 (2 weeks ago)	2026-06-13 19:55:09 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
Anonymous	2026-06-13 18:55:33 (2 weeks ago)	Port Scan	Port Scan
🇸🇪 donarev419	2026-06-09 06:21:20 (3 weeks ago)	Connection to port 8848 with data transfer. Data preview: GET /nacos/v1/cs/configs?dataId=&group=&te ... show more Connection to port 8848 with data transfer. Data preview: GET /nacos/v1/cs/configs?dataId=&group=&tenant=&search=accurate&pageNo=1&pageSize=1 HTTP/1.1 Host: show less	Port Scan Hacking

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2404:6800:4000:1003::129

🇧🇷 205.210.31.186

🇮🇶 185.187.207.245

🇫🇷 109.222.206.22

🇺🇸 52.3.155.146

🇨🇦 51.79.124.60

🇫🇷 46.105.28.235

🇵🇪 38.253.156.213

🇫🇷 37.59.148.214

🇬🇧 35.203.211.138

🇦🇷 179.41.7.254

🇸🇬 129.212.231.74

🇰🇷 49.142.144.189

🇸🇬 47.128.18.140

🇺🇸 44.192.43.19

🇯🇵 43.167.205.41

🇨🇳 39.149.5.191

🇺🇸 20.115.83.250

🇸🇬 13.228.246.83

🇨🇳 116.255.155.36